First published: Fri Dec 03 1999(Updated: )
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xinuos UnixWare | =7.1 | |
Xinuos UnixWare | =7.1.1 | |
Xinuos UnixWare | =7.0 | |
Xinuos UnixWare | =7.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0864 is considered a moderate severity vulnerability that allows local users to exploit symlink attacks.
To fix CVE-1999-0864, ensure proper file permissions are set to prevent unauthorized access to core dump files.
CVE-1999-0864 affects UnixWare versions 7.0, 7.0.1, 7.1, and 7.1.1.
CVE-1999-0864 allows local users to modify files through a symlink attack targeting the ./core.pid file.
There is no specific patch for CVE-1999-0864; however, applying security best practices can mitigate the risk.